Security Advisory
CVE-2024-28393
9.8
CRITICAL
Vulnerability Description
SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess() method.
Published Date
March 25, 2024
Official Source
NIST NVD Advisory